]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5441f05) | patch
api: disallow virConnect*HypervisorCPU on read-only connections v4.7-maint
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:17:39 +0000 (09:17 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 07:55:54 +0000 (09:55 +0200)
commitf5ace9c05d59b70d4899199a187cb32ec6f600d8
tree87984884b60c449b066ea464eda35b8df0374acftree
parent5441f05a42a90779b0df86518286bf527e94aafbcommit | diff
api: disallow virConnect*HypervisorCPU on read-only connections

These APIs can be used to execute arbitrary emulators.
Forbid them on read-only connections.

Fixes: CVE-2019-10168
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit bf6c2830b6c338b1f5699b095df36f374777b291)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-host.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git